On Fri, Jun 26, 2015 at 1:13 PM, Tim Chen <[email protected]> wrote:
> So correct me if I'm wrong, sounds like all you need is a principal user > name and also a keytab file downloaded right? > I'm not familiar with Mesos so don't know what kinds of features it has, but at the very least it would need to start containers as the requesting users (like YARN does when running with Kerberos enabled), to avoid users being able to read each other's credentials. -- Marcelo
